Methods and systems for authenticating users

Abstract

A method of authenticating users to reduce transaction risks includes indicating a desire to conduct a transaction and determining whether the transaction requires access to protected resources. Moreover, the method determines whether inputted information is known, determines a state of a communications device when the inputted information is known, and transmits a biometric authentication request from a server to an authentication system when the state of the communications device is enrolled. Additionally, the method includes validating the communications device, capturing biometric authentication data in accordance with a biometric authentication data capture request with the communications device, biometrically authenticating the user, generating a one-time pass-phrase and storing the one-time pass-phrase on the authentication system when the user is authenticated, comparing the transmitted one-time pass-phrase against the stored one-time pass-phrase, and granting access to the protected resources when the transmitted and stored one-time pass-phrases match.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS[0001]This is a continuation application of U.S. patent application Ser. No. 12 / 535,720, filed Aug. 5, 2009.BACKGROUND OF THE INVENTION[0002]This invention relates generally to methods and systems for authenticating users over networks, and more particularly, to methods and systems of authenticating users over networks that increase the security of protected resources accessible over networks to thus reduce network-based transaction risks.[0003]Websites are generally established by entities on networks such that users are able to navigate to the websites to conduct site appropriate network-based transactions. As long as user passwords required to access websites remain secret, such network-based transactions may be safely conducted without compromising the security of data that is accessible through the website. However, risks that such network-based transactions may be conducted fraudulently have increased due to password misuse, such as passw...

AI Technical Summary

Benefits of technology

[0005]In one aspect, a method of authenticating users to reduce transaction risks is provided. The method includes storing biometric authentication data and personal data for each of a plurality of authorized users in an authentication system, and storing protected resources in a server, wherein each of the protected resources is associated with a corresponding one of the plurality of authorized users. The authentication system is different than the se

Problems solved by technology

However, risks that such network-based transactions may be conducted fraudulently have increased due to password misuse, such as password sharing with untrustworthy third parties, and due to sophisticated techniques, such as phishing, developed by third parties to surreptitiously obtain user passwords.

Third parties may use such information to conduct fraudulent network-based transactions with financial institutions, blackmail patients to keep medical records confidential, and to anticipate and counter national military strategies.

Known authentication techniques that typically require users to

Images